Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a343a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a343a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          abHwj4wljuc79cUe+YfdNLf2n2pEBrKOvawD56aOwcs=
Subject key identifier:   B0:96:EF:2D:76:29:50:9B:0C:62:21:73:EA:AD:98:CF:7B:8D:85:F7
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       0C7C0357A07D3587E9C6712EEAAFCBC9C8B336B2
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a343a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        2804:1b04:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:03:57:a0:7d:35:87:e9:c6:71:2e:ea:af:cb:c9:c8:b3:36:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=B096EF2D7629509B0C622173EAAD98CF7B8D85F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:c4:50:06:50:d3:f7:63:d5:9f:cb:81:45:
                    3e:e6:09:3d:92:b2:fa:8f:29:cf:e1:d7:7b:15:a7:
                    ae:17:44:41:79:4c:e3:41:c1:eb:48:0d:01:5f:b5:
                    fa:da:52:6c:21:13:c3:6a:81:0d:a7:a7:5b:3b:97:
                    24:f7:8e:4c:51:a6:64:b1:c8:69:b3:73:a4:2e:8e:
                    e4:54:6e:bd:11:d5:1c:41:c8:20:34:3e:aa:8e:0c:
                    06:d7:e8:c6:d5:87:00:1f:52:d4:32:f5:e5:0d:cc:
                    ec:ee:a5:58:a0:73:44:e1:0c:c7:ed:2f:bf:fa:f5:
                    c9:7f:24:ad:06:94:6d:a5:ab:27:c9:7e:56:85:8b:
                    44:b8:c2:77:0f:54:d6:b3:f5:5d:9a:20:6e:93:a7:
                    d6:ff:ef:2f:c9:a4:9f:bf:82:a1:2a:c5:61:13:72:
                    78:b6:2d:d1:c3:f7:6b:e5:77:6c:ef:aa:a0:33:7f:
                    80:7a:e8:d2:ab:63:d1:38:04:1b:83:ca:c3:93:9c:
                    2c:5d:a9:3f:ef:41:df:86:b1:4a:58:86:c4:07:38:
                    f7:67:85:30:d0:71:fa:22:17:d4:22:3d:32:a7:49:
                    f6:b7:b2:89:8a:1a:c1:46:5a:cf:a5:97:7f:d0:05:
                    79:5b:14:de:a8:49:63:c6:06:1b:10:b0:d5:d2:51:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:96:EF:2D:76:29:50:9B:0C:62:21:73:EA:AD:98:CF:7B:8D:85:F7
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a343a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:de:09:e2:d1:73:88:30:f6:19:cc:4b:c1:58:71:7e:d2:
         20:f7:81:f0:2f:48:ef:7f:0a:92:bc:15:f8:35:f8:f3:8f:27:
         25:20:fe:49:e9:f4:9f:28:2b:ba:ae:8e:61:d3:7f:e9:38:47:
         eb:c0:d4:e6:6d:a6:02:3e:ba:0c:c0:a5:f5:12:98:2e:49:bc:
         4a:81:81:32:15:2d:ee:f4:c7:03:df:ee:9f:42:aa:41:82:fb:
         14:af:f2:13:2c:ff:b9:87:bf:4a:68:6e:83:64:62:7d:0a:0d:
         96:fc:c3:94:12:04:41:67:19:3f:d8:85:ee:22:9f:24:5e:78:
         7f:6a:72:cd:7d:07:53:79:76:92:85:2e:20:ff:a1:a4:6b:a6:
         9f:3f:12:69:13:14:b9:50:39:fe:b8:38:b5:ca:c1:5e:9b:5f:
         31:4a:e6:f9:b8:0a:7e:d9:98:12:ac:11:d5:b1:6e:9d:c4:5b:
         36:c3:dd:13:5b:10:a9:90:9c:d4:e8:70:2a:09:04:26:1d:a4:
         49:a4:af:20:23:11:07:23:c3:56:97:db:db:c0:17:0e:c7:1d:
         ea:ed:6c:54:bf:c7:3f:4e:f9:3d:54:b5:15:f2:7f:55:61:56:
         49:d5:3a:0f:26:43:4f:c2:2d:39:42:a3:4a:cc:6b:d8:f9:48:
         bd:b7:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org